nanog mailing list archives

.mn.rr.com dns possibly hacked?


From: Kevin Day <toasty () temphost dragondata com>
Date: Sat, 10 Mar 2001 13:28:06 -0600 (CST)


One of my customers, who's got a cable modem off of mn.rr.com is reporting
that roughly half the DNS lookups being done on their servers are returning 
the IP to www.lolitasex.com. I have no idea how widespread this is, but
apparently others in minneapolis are seeing the same thing.

If any of you have customers asking why their website is now a porn site,   
this may be why. :)

-- Kevin




Current thread: